News for hackers. Stuff that matters.

A comment on Malicious Rust crate Arrayref runs a build-time payload. Parent comment

Re:Malicious Rust crate Arrayref runs a build-time payload by faern on Thursday August 20, 2026 @10:39AM (#49375263)
> pnpm has a cooldown period for new dependencies

Cargo has `min-publish-age` in nightly, and it's currently heading towards stabilization: https://github.com/rust-lang/cargo/pull/17335

[ Parent | on HN ]

There are no comments on this comment yet.